Tyche Softwares Abandoned Cart Pro for WooCommerce

• CVE-2026-97657 Critical 9.8 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter 0.4%
• CVE-2026-102251 High 7.5 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter 0.4%
• CVE-2026-97668 Critical 9.8 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value 0.4%
• CVE-2026-81543 High 8.8 Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation 0.4%
• CVE-2026-66682 Critical 9.8 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability 0.5%
• CVE-2026-56010 High 8.8 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability 0.4%
• CVE-2025-4387 High 8.8 Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload 0.6%